laminas-xml VS countries-states-cities-database

I remember there are known vulnerabilities. You can use laminas-xml to load the HTML and then work with DOMDocument as usual. It's a really small package which started in the Zend Framework. See https://github.com/laminas/laminas-xml

At $WORK I created a prototype that used https://github.com/dr5hn/countries-states-cities-database for a city/state/country typeahead widget - it was generally ok, loaded data into a read-only sqlite db that was created at container build time. We shipped it to AWS for the demo. There are some data bugs, cities in Turkey and Geneva were the top reported issues. You get what you pay for I suppose. Have not seen Geonames before this post but agree the username vs some form of api key/auth is weird.

This looks promising.. https://github.com/dr5hn/countries-states-cities-database

Depending on what you need from this package, this might be of help https://github.com/dr5hn/countries-states-cities-database

Link

The latter one, though, says that it got its data from countries-states-cities-database, which has some json files with the countries, states and cities. The cities json file is huge. I really don't think that I would ever use all of them, I would only need data from North and South America, at most.